Privacy
Privacy policy
The short version: your migraine data stays on your device and in your private iCloud. I never see it, sell it, or share it. The app collects a small amount of anonymous usage data — never your health information. No ads, no tracking across apps or websites.
Last updated: 11 July 2026
Migraine Journal ("the app") is designed and operated by Mohamed Ali ("I", "me", or "the developer"). This policy explains how the app handles your information.
What the app stores
The app stores the following locally on your iPhone:
- Migraine entries — date, severity 0–10, pain locations, symptoms, possible triggers, sleep hours, stress level, and any notes you type
- Daily check-ins — the days you marked "All clear today"
- Medication logs — the medication name you type, and whether it helped
- Custom symptoms and custom triggers you create
- Disability assessment answers and scores, if you take an in-app assessment
- App settings — your daily reminder time and onboarding status
The app does not collect your name, email address, phone number, contacts, photos, browsing history, advertising identifier, or any other personal information beyond what you explicitly enter into the journal. There are no accounts and no login.
Where your data lives
On your device. Entries are stored locally using Apple's SwiftData framework, in the app's sandboxed storage.
In your private iCloud, if you're signed in. The app uses Apple CloudKit's private database to sync entries and check-ins across your own devices signed into the same Apple Account. That database is encrypted and accessible only to you. I do not have access to it. Apple's CloudKit is the only third party that touches this data, and only as a sync mechanism rather than a recipient. You can read more in Apple's iCloud data security overview.
If you aren't signed into iCloud, the app works entirely offline and stores everything only on the device you're using.
Anonymous usage data
To understand whether the app works and which features are actually used, it sends anonymous signals through TelemetryDeck, a privacy-focused analytics service. Those signals record things like: the app was opened, onboarding was completed, a migraine was logged, a daily check-in was completed along with the current streak length, a feature was used, and general device information such as iOS version and model.
They never include the severity, symptoms, triggers, notes, medications, or any other detail of an entry. This data is anonymous and not linked to any identity — the app has no account. It is not used for advertising, not used to track you across other apps or websites, and TelemetryDeck does not use the advertising identifier (IDFA).
Location and weather
If you turn on the migraine-risk forecast (a Plus feature), the app asks for your approximate, when-in-use location to fetch the local barometric-pressure forecast through Apple Weather (WeatherKit). Your location is sent only to Apple Weather to retrieve that forecast. It is not stored by the developer, not linked to your identity, and not used for tracking or advertising. The app uses approximate rather than precise location, and you can decline or revoke the permission at any time in iOS Settings — the app simply hides the forecast.
When weather data is available, the app also records a single derived number with a new entry: the change in barometric pressure over the preceding 24 hours. That number is stored alongside your entry, syncs with it through your private iCloud, and is included if you export your data. It is a weather measurement rather than a location: no coordinates, address, or place name is stored with your entries.
What the app does not do
- No advertising SDKs
- No tracking across websites or other apps
- No use of your data for marketing
- No selling, renting, or sharing your data with third parties
- No sending of your migraine entries or health information to me or anyone else
- No user accounts and no login
- No access to your contacts, photos, microphone, or camera
Aside from optional iCloud sync, anonymous analytics, and the optional weather forecast, the app does not require an internet connection.
Permissions the app may request
Notifications, for the daily check-in reminder — you choose the time, and it stays quiet on days you've already logged. iCloud, managed by Apple rather than requested separately; if you're signed in, sync happens automatically.Location, optional, only for the migraine-risk forecast as described above. That is the complete list. The app does not request access to your health data, contacts, camera, microphone, or photos.
Exporting and deleting your data
- Export — Settings → Data → Export all data saves a JSON file of your entries and medication logs to Files, Mail, AirDrop, or anywhere else. Daily check-ins sync through iCloud but are not part of the export file.
- Import — Settings → Data → Import from file restores a previous export.
- Delete — Settings → Data → Delete all data permanently removes every entry, medication log, and check-in from the device, and from iCloud if sync is on.
- Uninstall — deleting the app removes the local copy. With sync on, data remains in your iCloud private database until you delete it through Settings, or reinstall and delete.
Children's privacy
The app is not directed at children under 13 and does not knowingly collect data from them. Migraine affects people of all ages; if a minor uses the app, their parent or guardian retains the same rights described above.
Changes to this policy
If I change how the app handles data, I'll update this policy and the date at the top. Material changes will also appear in the app's App Store release notes. Because the app holds no contact information, I cannot notify you individually.
Contact
Questions about this policy or the app's privacy practices:[email protected]. If you're reporting a privacy or security concern, please put "Privacy" in the subject line.